Overview

overview

10

Static

static

10

NEAS.afa27...JC.exe

windows7-x64

10

NEAS.afa27...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.afa27b42ba131a8aa77c9c8a98d3f450_JC.exe

  • Size

    345KB

  • Sample

    231023-xzvzlsdd5t

  • MD5

    afa27b42ba131a8aa77c9c8a98d3f450

  • SHA1

    885fef2dd925cb191b69653dc0dc2e4ab524d2fc

  • SHA256

    c8da83a58d930c4a1e934acaf96735b653d643a85b861f94c3eb3688c671424a

  • SHA512

    a78150a04f993d73c35c6b453313b070c8fd4692a45abf6b14185d9e8ea29b2bf2053ab16fc9ad8778cb553d04a8e8ec0b09ec1e21ab7d5ec04a5bd83601e2d2

  • SSDEEP

    6144:D3S6aaFUrqMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeKr:Di6aaaa1uznghoaHACwBkka8eGp7dPRH

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.afa27b42ba131a8aa77c9c8a98d3f450_JC.exe

    • Size

      345KB

    • MD5

      afa27b42ba131a8aa77c9c8a98d3f450

    • SHA1

      885fef2dd925cb191b69653dc0dc2e4ab524d2fc

    • SHA256

      c8da83a58d930c4a1e934acaf96735b653d643a85b861f94c3eb3688c671424a

    • SHA512

      a78150a04f993d73c35c6b453313b070c8fd4692a45abf6b14185d9e8ea29b2bf2053ab16fc9ad8778cb553d04a8e8ec0b09ec1e21ab7d5ec04a5bd83601e2d2

    • SSDEEP

      6144:D3S6aaFUrqMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeKr:Di6aaaa1uznghoaHACwBkka8eGp7dPRH

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks